Re: Linux 2.6.12 REDIRECT bug?

[Bradley King <bking@freesurf.fr>]

Didn't hear back from anyone, this did indeed work.....(I don't need a 
response, but feared the message didn't arrive)

Thanks,
Brad

Patrick McHardy wrote:

> On Wed, 22 Jun 2005, Bradley King wrote:
>
>> [1.] One line summary of the problem:
>> the iptables REDIRECT kernel module seems to fail with kernel 2.6.12
>>
>> [2.] Full description of the problem/report:
>> Have been running previous 2.6.x versions w/o problems A command like:
>> iptables -t nat -A PREROUTING -i br0  -p tcp --dport 80 -j REDIRECT 
>> --to-port 8080
>> (used to redirect intranet traffic through a NAT/MASQUERADE firewall 
>> short circuits traffic (port 8080 see's no activity at all)
>> I tried DNAT with the same results
>> Note that the inferface is a bridge interface with an Ethernet and 
>> Wifi interface bridged togeter
>
>
> Does this patch help?
>
> Regards
> Patrick
>
>------------------------------------------------------------------------
>
>diff --git a/net/ipv4/ip_output.c b/net/ipv4/ip_output.c
>--- a/net/ipv4/ip_output.c
>+++ b/net/ipv4/ip_output.c
>@@ -188,7 +188,12 @@ static inline int ip_finish_output2(stru
> 		skb = skb2;
> 	}
> 
>-	nf_reset(skb);
>+#ifdef CONFIG_BRIDGE_NETFILTER
>+	/* bridge-netfilter defers calling some IP hooks to the bridge layer and
>+	 * still needs the conntrack reference */
>+	if (skb->nf_bridge == NULL)
>+#endif
>+		nf_reset(skb);
> 
> 	if (hh) {
> 		int hh_alen;
>  
>